NVD

Id
12939  
Name
CVE-2010-1407  
Description
WebKit in Apple iOS before 4 on the iPhone and iPod touch does not properly implement the history.replaceState method in certain situations involving IFRAME elements, which allows remote attackers to obtain sensitive information via a crafted HTML document.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-18  
Published
2010-06-22  
Modified Date
2011-03-17  
Seq
2010-1407  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
71457 12939 CVE-2010-1407 APPLE-SA-2010-11-22-1  View
71458 12939 CVE-2010-1407 APPLE-SA-2010-06-21-1  View
71459 12939 CVE-2010-1407 SUSE-SR:2011:002  View
71460 12939 CVE-2010-1407 http://support.apple.com/kb/HT4225  View
71461 12939 CVE-2010-1407 http://support.apple.com/kb/HT4456  View
71462 12939 CVE-2010-1407 MDVSA-2011:039  View
71463 12939 CVE-2010-1407 41016  View
71464 12939 CVE-2010-1407 USN-1006-1  View
71465 12939 CVE-2010-1407 ADV-2010-2722  View
71466 12939 CVE-2010-1407 ADV-2011-0212  View
71467 12939 CVE-2010-1407 ADV-2011-0552  View
71468 12939 CVE-2010-1407 appleios-historyreplace-info-disclosure(59629)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
35901 JVNDB-2010-001681 Apple iOS の WebKit における重要な情報を取得される脆弱性 Apple iPhone および iPod touch 上で稼働する Apple iOS の WebKit には、IFRAME 要素を伴う特定の状況において、history.replaceState メソッドを適切に実装しないため、重要な情報を取得される脆弱性が存在します。 CVE-2010-1407 43987 CVE-2010-1407 12939 4.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001681.html 2010-06-22 2010-12-10 View